This policy explains how Nelkos collects, uses, shares and protects your personal data under UK GDPR and the Data Protection Act 2018 — in plain English.
Data we collect
Account and identity data, order and transaction data, delivery addresses, payment metadata (we never store full card numbers), and device and usage data.
Why we use it and our legal bases
To perform our contract with you, for our legitimate interests (security, fraud prevention, improving our service), to meet legal obligations, and — where required — with your consent.
Sharing and transfers
We share data only as needed with sellers, couriers, payment processors and IT providers under strict agreements. We never sell your personal data. International transfers use appropriate safeguards.
Your rights
You can access, rectify, erase, restrict or object to processing, request portability, and withdraw consent at any time. You may also complain to the Information Commissioner’s Office (ICO).